JDY Botnet: Scanning Spike Indicative of CVE-2026-35616 Rapid Post-Disclosure Exploitation

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•3

Detects high-velocity port scanning bursts from a single source IP address targeting multiple destinations, often indicative of botnet reconnaissance activity such as the JDY botnet used to identify edge devices vulnerable to specific exploits like CVE-2026-35616.